This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/34322e3234302e3235322e302f32342d3234203d3e20313335333737.roa File: 34322e3234302e3235322e302f32342d3234203d3e20313335333737.roa (raw, json) Hash identifier: I4rUUuZZrlhV5mSs7MbD2j7D1g+m61ncG1LoNUdCiTs= Subject key identifier: 1D:F3:5B:06:51:73:32:9C:B4:62:DB:FE:04:3E:33:75:AA:C6:B7:0F Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 04CDFAAC4B1EBF1FE89744FA9FC46457D46DBBB7 Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/34322e3234302e3235322e302f32342d3234203d3e20313335333737.roa Signing time: Tue 20 Jan 2026 02:10:49 +0000 ROA not before: Tue 20 Jan 2026 02:05:49 +0000 ROA not after: Tue 19 Jan 2027 02:10:49 +0000 asID: 135377 IP address blocks: 42.240.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 22:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:cd:fa:ac:4b:1e:bf:1f:e8:97:44:fa:9f:c4:64:57:d4:6d:bb:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Jan 20 02:05:49 2026 GMT Not After : Jan 19 02:10:49 2027 GMT Subject: CN=1DF35B065173329CB462DBFE043E3375AAC6B70F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f8:f3:bd:8d:09:10:68:5e:8d:5b:fa:78:24: 23:b7:4a:5b:35:1e:9e:dc:da:c5:98:52:5a:8e:d5: d5:19:4e:a4:ab:17:a2:91:99:0e:83:df:39:d2:fc: 91:41:24:1a:fd:de:4c:00:a6:04:59:a1:c4:8c:fd: de:10:4a:ca:13:b0:73:2c:cb:cb:9a:a0:3e:e8:3f: 0d:39:2c:ce:bd:dc:7e:2a:7b:16:55:96:c5:6f:f2: fb:7a:5b:8a:8f:86:ad:11:24:1a:ff:06:30:b3:b1: 88:43:da:fb:a8:93:7d:63:eb:5d:e7:78:eb:fa:f2: d7:8f:e3:08:c5:b0:34:f5:0a:5a:5b:1c:76:ee:b2: 51:13:34:ec:92:f4:7c:07:c4:53:62:6f:2b:fd:d9: c2:d3:fa:61:72:2a:69:88:46:ff:f3:f3:53:70:67: f9:a0:53:49:f7:15:05:23:38:15:a0:af:c9:94:f9: 06:42:31:03:88:24:dc:87:bf:53:5a:5d:3f:3f:0b: a3:03:c7:1d:eb:65:db:05:88:60:93:20:2b:4e:c4: 0c:ee:03:45:9c:5d:13:ff:d8:06:81:6b:be:3d:5d: 5f:c3:e2:fc:c4:91:a8:7f:7f:22:cc:36:2d:78:77: 55:d6:e4:9b:8e:c0:ec:37:5a:96:ae:61:f1:f6:4b: 15:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F3:5B:06:51:73:32:9C:B4:62:DB:FE:04:3E:33:75:AA:C6:B7:0F X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/34322e3234302e3235322e302f32342d3234203d3e20313335333737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.240.252.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:ee:15:c4:b2:67:f3:e3:d0:c9:d8:6a:c7:ca:d1:d2:a4:8b: 52:ba:cb:3a:6b:6e:e2:eb:90:fb:a2:35:38:9c:91:fe:8a:78: e4:a6:97:7d:06:a4:4d:4c:4c:72:57:3c:bd:e9:d2:05:7c:0c: df:68:55:73:4a:2e:d0:50:77:3f:a1:0c:52:b3:9e:7f:e7:94: d2:e6:65:ea:9a:35:2c:a9:c1:72:56:29:bd:a8:1b:c3:19:c3: 76:d8:ad:d9:0b:2a:bc:a4:e6:6f:d5:6f:00:da:38:cd:5a:ab: 7e:cd:be:96:b6:08:20:37:b9:69:2d:ab:02:cc:a3:0e:df:be: 25:f0:92:ef:b0:6b:b9:9c:dd:76:43:16:7b:51:cd:43:93:40: 95:d5:79:22:25:3f:e9:4c:f1:1b:e9:ed:82:a3:ab:37:33:04: 4c:bf:2c:e7:ea:f3:89:1d:8f:91:82:77:39:cc:b0:69:70:44: 4e:a6:27:a0:93:dd:9b:9c:e7:bd:b6:c6:69:83:32:de:af:2a: f5:8c:2d:8b:f6:98:32:d3:ed:c4:4b:57:b9:0d:34:26:a4:95: 7b:e6:37:b8:5f:4b:b4:e4:5c:75:77:c9:9b:0c:40:85:82:96: 77:fe:ec:27:ab:2f:eb:cd:0c:a2:94:43:40:a1:b7:2a:5b:e8: c0:c2:c2:b9 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUBM36rEsevx/ol0T6n8RkV9Rtu7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjAxMjAwMjA1NDlaFw0yNzAxMTkwMjEwNDlaMDMxMTAvBgNV BAMTKDFERjM1QjA2NTE3MzMyOUNCNDYyREJGRTA0M0UzMzc1QUFDNkI3MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN+PO9jQkQaF6NW/p4JCO3Sls1 Hp7c2sWYUlqO1dUZTqSrF6KRmQ6D3znS/JFBJBr93kwApgRZocSM/d4QSsoTsHMs y8uaoD7oPw05LM693H4qexZVlsVv8vt6W4qPhq0RJBr/BjCzsYhD2vuok31j613n eOv68teP4wjFsDT1ClpbHHbuslETNOyS9HwHxFNibyv92cLT+mFyKmmIRv/z81Nw Z/mgU0n3FQUjOBWgr8mU+QZCMQOIJNyHv1NaXT8/C6MDxx3rZdsFiGCTICtOxAzu A0WcXRP/2AaBa749XV/D4vzEkah/fyLMNi14d1XW5JuOwOw3WpauYfH2SxWVAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUHfNbBlFzMpy0Ytv+BD4zdarGtw8wHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1ODkxODcvMC8zNDMyMmUzMjM0 MzAyZTMyMzUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNTMzMzczNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEACrw/DANBgkqhkiG9w0BAQsFAAOCAQEAbu4VxLJn8+PQydhqx8rR 0qSLUrrLOmtu4uuQ+6I1OJyR/op45KaXfQakTUxMclc8venSBXwM32hVc0ou0FB3 P6EMUrOef+eU0uZl6po1LKnBclYpvagbwxnDdtit2QsqvKTmb9VvANo4zVqrfs2+ lrYIIDe5aS2rAsyjDt++JfCS77BruZzddkMWe1HNQ5NAldV5IiU/6UzxG+ntgqOr NzMETL8s5+rziR2PkYJ3OcywaXBETqYnoJPdm5znvbbGaYMy3q8q9Ywti/aYMtPt xEtXuQ00JqSVe+Y3uF9LtORcdXfJmwxAhYKWd/7sJ6sv680MopRDQKG3KlvowMLC uQ== -----END CERTIFICATE-----Generated at Wed Jan 21 01:31:59 2026 by rpki-client